Nozomi Networks Guardian/CMC SQL Injection Vulnerability

Nozomi Networks Guardian/CMC is a centralized management console from Nozomi Networks, Inc. in the United States. An SQL injection vulnerability exists in Nozomi Networks Guardian/CMC that stems from incorrect input validation of certain parameters used in the query function...

North Korea's Lazarus Group Suspected in $31 Million CoinEx Heist

The North Korea-affiliated Lazarus Group has stolen nearly $240 million in cryptocurrency since June 2023, marking a significant escalation of its hacks. According to multiple reports from Certik, Elliptic, and ZachXBT, the infamous hacking group is said to be suspected behind the theft of $31...

Rouge ward can remove auth permission from other wards and then remove themselves

Lines of code Vulnerability details In a protocol, the deny function is used to remove the ward permissions from an address. This is actually a serious thing to consider that can actually occur, if a ward contract or account is obtained and other wards are not aware, the rogue ward can actually...

Damon Enterprise Manager (DEM) suffers from a logic flaw vulnerability (CNVD-2023-78062)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A logic flaw vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to delete arbitrary files...

MOXA MXsecurity Trust Management Issue Vulnerability

MOXA MXsecurity is a management platform from China-based MOXA. that provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MXsecurity v1.0....

Graylog 数据伪造问题漏洞

Graylog is a centralized log management solution from Graylog USA. The product supports capturing, storing, and analyzing logs in real time, among other things. Graylog suffers from a data forgery issue vulnerability that stems from vulnerability to DNS cache poisoning attacks...

Command execution vulnerability in Damon Enterprise Manager (DEM) (CNVD-2023-69447)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A command execution vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by an attacker to gain control of the server...

pcp bug fix and enhancement update

An update is available for pcp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Performance Co-Pilot PCP is a suite of tools, services, and libraries for...

Arbitrary File Download Vulnerability in Damon Enterprise Manager (DEM)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages, and maintains DM databases through the web interface. An arbitrary file download vulnerability exists in DEM, which can be exploited by attackers to obtain sensitive information...

F5 BIG-IP and BIG-IQ Centralized Management Denial of Service Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery...

F5 BIG-IP iControl SOAP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IQ Centralized Management is a software-based cloud management solution from F5 USA. The solution supports the deployment of application delivery...

CVE-2023-34734

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting XSS...

CVE-2023-34734

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting XSS...

secnet AC Centralized Management Platform 跨站脚本漏洞

secnet AC Centralized Management Platform is an intelligent AC management platform from secnet. A security vulnerability exists in secnet AC Centralized Management Platform version 1.02.040, which stems from a stored cross-site scripting XSS vulnerability...

CVE-2023-34734

CVE-2023-34734 is documented in multiple connected sources as a vulnerability in Annet AC Centralized Management Platform 1.02.040. The issue is described as a Stored Cross-Site Scripting (XSS) flaw. The connected documents consistently cite the affected product and version, but do not provide de...

CVE-2023-34734

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting XSS...

PT-2023-24989 · Unknown · Ac Centralized Management Platform

Name of the Vulnerable Software and Affected Versions: Annet AC Centralized Management Platform version 1.02.040 Description: The issue is related to Stored Cross-Site Scripting XSS. Recommendations: For Annet AC Centralized Management Platform version 1.02.040, at the moment, there is no...

CVE-2023-34734: Improper Neutralization of Input During Web Page Generation

Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting XSS...

Lenovo XClarity Administrator 输入验证错误漏洞

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product provides agentless hardware management for servers, storage, network switches, and more. A security vulnerability exists in Lenovo XClarity Administrator, which stems from insufficient...

Lenovo XClarity Administrator 操作系统命令注入漏洞

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The product is capable of providing agentless hardware management for servers, storage, network switches, and more. A command injection vulnerability exists in Lenovo XClarity Administrator, which...